Does this work ?

jrfnl · Dec 8, 2024 · 205f809 · 205f809
1 parent a2067b9
commit 205f809
Showing 1 changed file with 6 additions and 9 deletions.
diff --git a/.github/workflows/verify-release.yml b/.github/workflows/verify-release.yml
@@ -65,6 +65,12 @@ jobs:
           ini-values: error_reporting=-1, display_errors=On
           coverage: none
 
+      - run: wget -O phive.phar https://phar.io/releases/phive.phar
+      - run: wget -O phive.phar.asc https://phar.io/releases/phive.phar.asc
+      - run: gpg --keyserver hkps://keys.openpgp.org --recv-keys 0x9D8A98B29B2D5D79
+      - run: gpg --verify phive.phar.asc phive.phar
+
+
       - name: Verify PHAR file is available and download
         run: curl --remote-name https://github.com/PHPCSStandards/PHP_CodeSniffer/releases/latest/${{ matrix.pharfile }}.phar
 
@@ -79,15 +85,6 @@ jobs:
 #        env:
 #          GH_TOKEN: ${{ github.token }}
 
-
-      - name: Single step
-        env:
-          FINGERPRINT: "0x689DAD778FF08760E046228BA978220305CD5C32"
-        run: |
-          gpg --keyserver keys.openpgp.org --recv-keys $FINGERPRINT
-          gpg -k
-          gpg --verify ${{ matrix.pharfile }}.phar.asc ${{ matrix.pharfile }}.phar
-
       - name: Download public key
         env:
           FINGERPRINT: "0x689DAD778FF08760E046228BA978220305CD5C32"